Privacy Policy
Last updated: February 14, 2026
Privacy Policy
Last updated: February 2025
1. Who we are
EstatOS is published by Paul DOSSER, micro-entrepreneur based at 9 RUE DES COLONNES 75002 PARIS, France.
Contact for privacy questions: contact@pauldosser.fr
2. What data do we collect?
On our landing page, we only collect:
- Your email address when you sign up for our newsletter or waiting list
- Browsing data (pages visited, time spent) via analytics cookies
We do not collect:
- Name, surname, phone, postal address
- Sensitive data (health, religion, political opinions)
- Banking information
3. Why do we collect this data?
- Email: To inform you about the launch of EstatOS and our updates
- Browsing data: To improve the user experience of our website
- Analytics cookies: To understand how our website is used
Legal basis: Your consent (checkbox or continued browsing)
4. How long do we keep your data?
- Newsletter emails: Maximum 3 years from your last click or opening
- Browsing data: 25 months (legal duration for analytics cookies)
- Automatic deletion after these periods
5. Who has access to your data?
- Paul DOSSER (founder of EstatOS)
- Our technical service providers:
- Web hosting: Vercel (United States, GDPR certified)
- Database: Supabase (Europe-West-3, France)
- Other services if applicable, only within the European Union
We never sell your data to third parties.
6. Your rights
You have the following rights:
✅ Access: Know what data we have about you
✅ Rectification: Correct inaccurate information
✅ Deletion: Request erasure of your data
✅ Objection: Refuse processing of your data
✅ Portability: Retrieve your data in a usable format
✅ Unsubscribe: Opt out at any time
How to exercise your rights:
- Email: contact@pauldosser.fr
- Mail: Paul DOSSER, 9 RUE DES COLONNES 75002 PARIS, France
- Unsubscribe link in every email
7. Cookies
Cookies we use:
- Technical cookies: Website functionality (exempt from consent)
- Analytics cookies: Audience measurement (with your agreement)
Manage your cookies:
- Configure your browser to accept/refuse them
- Modify your choices via our cookie banner
- Disable Google Analytics: tools.google.com/dlpage/gaoptout
8. Data security
We implement technical and organizational measures to protect your data:
- Data encryption in transit (HTTPS)
- Limited access to personal data
- Secure hosting with Vercel
- Access monitoring
In case of a data breach concerning you, we will inform you within 72 hours.
9. International transfers
Some of our service providers may be located outside the European Union:
Vercel (web hosting): United States
- Adequate level of protection guaranteed
- Transfers governed by the European Commission's standard contractual clauses
Supabase (database): Europe-West-3, France
- Your personal data remains in France
- No international transfer for storing your emails
You can object to international transfers by contacting us.
10. Changes to this policy
This privacy policy may be updated. In case of substantial modification, we will inform you:
- By email if we have your address
- Via a banner on our website
- Last update date indicated at the top of this page
11. Contact and complaints
Questions about your personal data:
- Email: contact@pauldosser.fr
- Address: Paul DOSSER - DPO, 9 RUE DES COLONNES 75002 PARIS, France
Complaints: If you believe your rights are not being respected, you can file a complaint with the CNIL:
- Online: www.cnil.fr/en/plaintes
- By mail: CNIL, 3 place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France
This privacy policy complies with the General Data Protection Regulation (GDPR) and French Data Protection Law.